Application No: 10/577,087 
Attorney's Docket No: AT03 0059 USl 



CLAIM AMENDMENTS 

This listing of claims will replace all prior versions and listings of claims in 
the application. 

1-7. (Canceled) 

8. (Currently Amended) Digital A digital rights management CPRM) client unit 
for use i n a DRM system!!,]] said DRM system comprising: 

a_DRM server units issuing device that issues digital rights objects (DROs) 
representing u s age right o of permission to use associated digital data objects 
rDDOs): 

and~a_DRM user units for interacting device that receives the DROs from the 
DRM server device; and 

a plurality of with said DRM client units devices granted permission by the 
DRM user device to use a specific DDO, wherein each DRM client device further 
comprises: and said DRM server unit s- eompri s in - g -f 

a data storage unit for s t o rin g digital data objects that stores the 

associated DDOs on the basis of DROs stored in the DRM user device , 

an- a first authentication unit for authentication of that authenticates 
the DRM client unit to a device by the DRM user unit device, and 
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a rights interface for ro questing that requests access to a-digital rights 
efejeek- the DROs associated with a digital data object the DDOs stored in said 
data storage unit after authentication to a -the DRM userFf.11 unit device to 
get uoagc rights for the usage of said aooociatod digital data object . 

9. (Currently Amended) Digital A digital rights management system 
comprising: 

a plurality of DRM client unite for otoring devices that store digital data 
objects (DDOs): 

a_DRM server units for ioauing device that issues digital rights objects 
(DROs) representing uoago righto of permission to use associated dipit.nl rintn 
objects DDOs: and 

a DRM user device that receives the DROs from the DRM server device , and 
DRM uoor units for interacti ng with -s aid DRM client units and wherein said DRM 
s erver - units comprising user device further comprises : 

an -a second authentication unit for authentication of the DRM user 
unit to a DRM server u nit and - for authentication of a that authenticates the 
plurality of DRM client devices unit to the DRM us e r unit; and 

a rights storage unit for storin g- digital - rights objects that stores DROs 
received from a— the DRM serve r unit device, wherein said digital rights 
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objects can be DROs are accessed by an authenticated DRM client unifr- device 
to get ucagc righto for the uoagc of an p ermission to use an associated digital 
data object DDO stored on said DRM client-tmit device: and 

a second interface that receives the DROs from the DRM server device 
after the DRM user device is authenticated and grants usage rights for the 
associated DDO stored on an authenticated DRM client device. 

10. (Currently Amended) Digital A digital rights management (DRM) method fee 
use- performed in a DRM system, said DRM system comprising a plurality of DRM 
client unite for otoring devices that store digital data objects (DDOs). a DRM server 
unites for ioouing device that issues digital rights objects {DROs)_rep resenting u sa ge 
right cs of permission to use associated digital data objects DDOs. and a_DRM user 



said DRM server units device, said method comprising the steps of: 

authentication of a authenticating the DRM user unit device to ar -the DRM 
server unit device to transfer ef-a requested digital r i ghto object PRO from said 
DRM server unit device to said DRM user unit device after successful 
authentication]!,]]! 

authenti c ation of a authenticating a plurality of DRM client uni^ devices to 
said DRM user unit devicefl" ,]]: 




- device that interacts with said DRM client units devices and 
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determining, with the DRM user device, whether to grant permission to use a 
specific DDQ to different DRM client devices: and 

tr an sfer of when permission is granted, transferring usage rights from said 
DRM user device u nit— -to said DRM client unit devices after successful 
authentication to permit use of the specific DDQ for the usage of an as sociated 
digital data object stored on said DRM client unit . 

11. (New) The system of claim 8, wherein the DRM user device further 
comprises: 

a second authentication unit; and 

a first revocation list storage unit that stores a revocation list of DRM client 
devices, wherein the second authentication unit checks the revocation list during 
authentication of each DRM client device. 

12. (New) The system of claim 11, wherein the DRM server device further 
comprises: 

a second revocation list storage unit that updates the revocation list stored in 
the first revocation list storage unit in the DRM user device. 
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13. (New) The system of claim 8, wherein the DRM server device further 
comprises: 

a third authentication unit that performs mutual authentication with a 
second authentication unit in the DRM user device. 

14. (New) The system of claim 8, wherein the DRM user device further 
comprises: 

a second interface that receives the DROs from the DRM server device after 
the DRM user device is authenticated and grants usage rights for the associated 
DDO stored on an authenticated DRM client device. 

15. (New) The system of claim 8, wherein each DRO represents exactly one 
permission to use the associated DDO. 

16. (New) The system of claim 9, wherein the DRM user device further 
comprises: 

a first revocation list storage unit that stores a revocation list of DRM client 
devices, wherein the second authentication unit checks the revocation list during 
authentication of each DRM client device. 
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17. (New) The system of claim 16, wherein the DRM server device further 
comprises: 

a second revocation list storage unit that updates the revocation list stored in 
the first revocation list storage unit in the DRM user device. 

18. (New) The system of claim 9, wherein the DRM server device further 
comprises: 

a third authentication unit that performs mutual authentication with the 
second authentication unit in the DRM user device. 

19. (New) The system of claim 9, wherein the DRM server device determines a 
limited number of supported DRM clients that can access the DDOs prior to issuing 
the DROs to the DRM user device, 

20. (New) The system of claim 9, wherein each DRO represents exactly one 
permission to use the associated DDO. 

21. (New) The method of claim 10, further comprising: 
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storing a revocation list of DRM client units in the DRM server device, 
wherein a second authentication unit in the DRM user device checks the revocation 
list during authentication of each DRM client device. 

22. (New) The method of claim 21, further comprising: 

using the DRM server device to update the revocation list stored in the DRM 
user device. 

23. (New) The method of claim 10, further comprising: 

performing mutual authentication of the DRM server device and the DRM 
user device. 

24. (New) The method of claim 10, further comprising: 

receiving the DROs from the DRM server device with an authenticated DRM 
user device; and 

granting usage rights for the associated DDO stored on an authenticated 
DRM client device. 

25. (New) The method of claim 10, wherein each DRO represents exactly one 
permission to use the associated DDO. 
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26. (New) The method of claim 10, further comprising: 

determining, with the DRM server device, a limited number of supported 
DRM clients that can access the DDOs. 

27. (New) The method of claim 10, further comprising: 
defining each DRO as either transferable or non-transferable. 
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